Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33342d3334203d3e20323634343530.roa
File:                     323830343a316564633a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier:          WWK7hT0/OL/I50cMFx5wWxkrnNxlPj6RseTCszwnZUo=
Subject key identifier:   AC:E1:AC:44:8A:91:8B:44:33:BC:6E:1D:EC:E5:F1:0D:30:F0:EC:83
Certificate issuer:       /CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
Certificate serial:       1254E8C8DEA5745E84D5084DA8B4B0F7BC86620B
Authority key identifier: 92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33342d3334203d3e20323634343530.roa
Signing time:             Tue 06 Oct 2026 00:30:30 +0000
ROA not before:           Tue 06 Oct 2026 00:25:30 +0000
ROA not after:            Tue 05 Oct 2027 00:30:30 +0000
asID:                     264450
IP address blocks:        2804:1edc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:54:e8:c8:de:a5:74:5e:84:d5:08:4d:a8:b4:b0:f7:bc:86:62:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
        Validity
            Not Before: Oct  6 00:25:30 2026 GMT
            Not After : Oct  5 00:30:30 2027 GMT
        Subject: CN=ACE1AC448A918B4433BC6E1DECE5F10D30F0EC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:30:d2:e5:1b:a5:02:0f:12:7e:1d:41:e2:
                    39:49:fe:be:4c:8c:50:4e:fe:26:74:3c:dc:39:a1:
                    d8:d9:bd:97:84:40:47:91:77:63:01:2d:a7:1a:4b:
                    9e:a1:01:e5:ed:bc:30:72:59:c2:1a:19:ac:0a:e8:
                    d4:b8:2c:93:2f:7d:10:49:7a:34:95:3e:de:3e:7c:
                    d0:e3:34:a2:69:7c:49:61:3d:35:1c:0d:d0:16:55:
                    d4:5e:70:dc:d3:1e:a8:db:8e:10:9e:a1:95:50:7e:
                    70:dc:e9:6e:f1:fd:7f:b2:1f:a3:7e:9a:17:8e:27:
                    13:29:b9:10:1d:54:20:31:21:b3:b3:77:77:f8:43:
                    3b:22:2e:dd:e7:38:e2:09:8b:c6:9e:fc:9f:a9:14:
                    9d:6e:74:3d:50:aa:05:0c:a3:1b:0d:ae:e1:3e:dc:
                    f2:f2:be:23:76:e1:33:16:9e:80:9f:a2:d6:5a:87:
                    21:9c:80:dd:b4:48:bf:c6:ed:8a:8e:00:df:3c:e1:
                    41:aa:93:9c:6c:3d:45:70:aa:1a:9b:df:06:d2:cb:
                    57:ed:6a:8a:61:16:30:45:68:1b:92:62:4c:52:22:
                    8d:c5:7f:16:4b:cf:17:46:1d:2e:ad:e8:79:70:ea:
                    ef:3d:df:fc:bc:f5:1e:de:b0:f4:80:c8:ff:f6:3f:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:AC:44:8A:91:8B:44:33:BC:6E:1D:EC:E5:F1:0D:30:F0:EC:83
            X509v3 Authority Key Identifier:
                keyid:92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33342d3334203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:fd:e1:9e:33:b0:37:5b:29:23:73:b4:6b:fc:65:de:dc:21:
         55:b0:ba:e1:35:90:03:77:44:a7:95:30:6f:49:6f:49:a6:8c:
         cf:18:7f:cf:83:4a:34:1d:9f:71:72:4f:e3:48:18:0f:55:09:
         ef:1d:46:90:ee:fb:bd:c1:05:fa:b1:3e:a1:67:ee:fb:4c:4d:
         5a:0f:f4:bb:81:5b:45:8b:19:ad:55:42:c7:a9:a9:0e:a2:5b:
         5e:69:d9:59:27:f7:04:ce:3f:63:1f:1c:81:8c:d9:52:34:35:
         95:e2:ea:0b:34:2c:81:b7:ae:cf:44:34:5a:da:85:2a:07:b4:
         66:93:46:2e:ae:92:3f:bb:10:80:11:9a:0c:3c:c7:63:b6:5e:
         36:84:ea:95:39:bb:b8:08:40:18:5d:3d:70:8a:a6:cf:2b:45:
         b5:6a:22:07:60:d6:06:10:e0:78:73:53:20:b2:85:1d:d2:bd:
         e8:c8:c3:fe:79:1d:71:ae:1f:f3:46:d0:8b:e2:00:4b:dd:11:
         03:cd:ab:d1:49:fc:e0:0a:00:c3:fa:a1:15:0b:a5:62:44:a1:
         9c:4a:09:9f:46:e5:ea:be:dc:91:74:11:7d:72:2d:3f:b6:2d:
         a0:4f:e2:91:3b:53:7e:de:51:28:d8:18:0c:32:b6:73:c1:ba:
         87:d0:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:33:31 2026 by rpki-client